Dell Client BIOS Multiple Vulnerabilities (DSA-2021-106)

According to its self-reported version, Dell BIOS is affected by multiple vulnerabilities. - Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit th...

CVE-2021-21574

Dell BIOSConnect vulnerability (CVE-2021-21574) is a buffer overflow in the Dell BIOSConnect feature of Dell Client BIOS. Exploitation requires an authenticated, local admin user and can lead to arbitrary code execution with UEFI/BIOS privileges, potentially bypassing UEFI restrictions. Public de...